Proving Grounds / OSCP Practice
Walkthroughs focused on training-lab enumeration, initial access, privilege escalation, and reusable offensive-security lessons.
5 published writeups
Browse category
: Proving Grounds / OSCP Practice
LAB WALKTHROUGHS
Writeups
Technical walkthroughs of security labs and training-platform machines, focused on enumeration, exploitation, privilege escalation, and practical lessons.
Categories
Browse published writeups by focus area.
Web & API Security
Walkthroughs of web and API security labs covering vulnerability discovery, exploitation, and practical attack paths.
Planned
Mobile Security
Walkthroughs of Android and iOS security labs covering application analysis, exploitation, and mobile-specific attack techniques.
Planned
Published writeups
Writeup Proving Grounds Practice Medium
SpiderSociety — Proving Grounds
A Proving Grounds Linux walkthrough covering virtual-host discovery, default control-panel credentials, FTP access to application source code, a hidden environment file exposing reusable credentials, SSH access as spidey, and privilege escalation through a writable systemd service with limited passwordless systemctl permissions.
- proving-grounds
- linux
- apache
- vsftpd
- virtual-host
- default-credentials
- ftp
- source-code-review
- credential-reuse
- ssh
- systemd
- privilege-escalation
Writeup Proving Grounds Practice Medium
Quackerjack — Proving Grounds
An exposed rConfig instance was taken over through an administrator password reset, then leveraged through an upload-validation bypass to obtain a shell as apache and escalate through a SUID find binary.
- proving-grounds
- linux
- rconfig
- authentication-bypass
- file-upload-bypass
- php
- web-shell
- reverse-shell
- linpeas
- suid
- find
- privilege-escalation
Writeup Proving Grounds Practice Hard
Pebbles — Proving Grounds
A Proving Grounds Linux walkthrough covering ZoneMinder SQL injection, a MySQL file write into the Apache web root, a reverse shell as www-data, and privilege escalation through a MySQL UDF.
- Linux
- Proving Grounds
- ZoneMinder
- SQL Injection
- PHP
- MySQL
- UDF
- Privilege Escalation
Writeup Proving Grounds Practice Easy
Levram — Proving Grounds
A Proving Grounds Linux walkthrough covering authenticated Gerapy RCE, Python capability enumeration, and root access through cap_setuid.
- proving-grounds
- linux
- gerapy
- cve-2021-43857
- web-exploitation
- authenticated-rce
- weak-credentials
- reverse-shell
- linpeas
- linux-capabilities
- cap-setuid
- privilege-escalation
Writeup Proving Grounds Practice Easy
Law — Proving Grounds
A Proving Grounds Practice Linux walkthrough covering htmLawed command execution, runtime process monitoring, and a root-executed writable script.
- proving-grounds
- linux
- htmlawed
- cve-2022-35914
- web-exploitation
- reverse-shell
- privilege-escalation
- pspy
- scheduled-tasks